Resources
Articles
Original articles for engineers and compliance teams, each with its sources listed.
Latest articles
Automated Document Validation: Error Rates and the MRZ Check
How automated ID document validation is measured: document false acceptance and rejection rates, MRZ consistency, document presence and testing conditions.
Biometric Data Under GDPR and UK GDPR: What Verification Teams Settle Before Launch
When a face template is special category data, which lawful bases and conditions apply, and what the UK regulator says about alternatives, thresholds and retention.
What Customer Due Diligence Consists Of Under the EU AML Regulation
The measures that make up customer due diligence in the EU AML Regulation, how risk sets their extent, and what must happen when they cannot be completed.
The EU AML Regulation and Remote Customer Identification
How the EU AML Regulation sets out identification and verification, including electronic identification, and which details are left to technical standards.
Switzerland's Revised Circular on Video and Online Identification
What the Swiss financial supervisor announced in October about video and online identification, and where liveness detection enters a remote onboarding flow.
How to Read a Face Recognition Evaluation
False match rate, false non-match rate and thresholds explained from the public Face Recognition Technology Evaluation, with questions to ask about any dataset.
What SP 800-63A-4 Asks of Remote Identity Proofing
A product owner's guide to the US identity proofing publication: evidence strength, document validation, biometric thresholds and injection controls for remote onboarding.
Politically Exposed Persons: Who Counts Under the EU AML Regulation
How the EU AML Regulation defines politically exposed persons, family members and close associates, and which additional measures follow.
What Presentation Attack Detection Testing Measures
What APCER, BPCER and the test levels mean, how to read a laboratory confirmation letter, and what a presentation attack detection test does not cover.
Presentation Attacks, Deepfakes and Injection Attacks: Where Each Defence Sits
How presentation attacks, deepfakes and injection attacks differ in remote verification, and which control layer addresses which, with primary sources.
Reading the Security Features of an ID Document
Which security features public guidance describes on ID documents, how counterfeits and forgeries differ, and what a photograph can and cannot show.
Sanctions Screening Explained: The Lists, the Matching and the Review
How the main sanctions lists are published, how fuzzy name matching and thresholds shape the alerts you review, and what a review step should record.